The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition arises from insufficient verification of input data. This vulnerability allows a perpetrator to trigger service failures.

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to trigger service failures remotely...

Paragraphs admin - Moderately critical - - SA-CONTRIB-2023-049

This module enables you to view all paragraph entities in an admin view. The module contains an access bypass that allows non admin users to access the view. The vulnerability can be mitigated by editing the view to change the permission required to access the page...

Rockwell Automation FactoryTalk View SE Input Validation Error Vulnerability (CNVD-2024-37628)

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. A security vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by a remote attacker to submit a special request that can take the product offline...

CVE-2023-40140

In androidviewInputDevicecreate of androidviewInputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40137

In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40138

In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-46289

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a...

CVE-2023-46289 Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a...

CVE-2023-46289

Rockwell Automation FactoryTalk View Site Edition (V11.0 affected) suffers from improper input validation (CVE-2023-46289). Insufficient validation could allow a remote attacker to submit malicious data, potentially rendering the product unavailable and requiring a restart to recover, i.e., a den...

CVE-2023-46289 Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a...

PT-2023-27288 · Google · Android

Name of the Vulnerable Software and Affected Versions: DialogFillUi.java affected versions not specified Description: The issue is related to a confused deputy in the setHeader of DialogFillUi.java, allowing an attacker to view another user's images. This could lead to local information disclosur...

Rockwell Automation FactoryTalk View SE 输入验证错误漏洞

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. A security vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by a remote attacker to submit a special request that can take the product offline...

PT-2023-6582 · Rockwell Automation · Factorytalk® View Site Edition

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk View Site Edition affected versions not specified Description: The issue is related to insufficient validation of user input, which could allow threat actors to send malicious data and bring the product offline...

PT-2023-27289 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to a confused deputy in multiple functions, potentially allowing an attacker to view another user's images. This could lead to...

PT-2023-27285 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to a confused deputy in multiple locations, potentially allowing an attacker to view another user's images. This could lead to...

PT-2023-27286 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: The issue is related to a confused deputy in the isFullScreen function of FillUi.java, which could allow viewing another user's images. This leads to...

CVE-2023-5805

A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file viewestate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit h...

Rockwell Automation FactoryTalk View Site Edition

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View Site Edition Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the...

Information Disclosure

wagtail is vulnerable to Information Disclosure. The vulnerability allows an authenticated admin attacker to obtain the display names of user accounts by making a direct URL request to the admin view that handles bulk actions on user accounts...

PT-2023-32341 · Unknown · Sourcecodester Simple Real Estate Portal System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Real Estate Portal System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file view estate.php. The manipulation of the id argument leads to SQL injection. This issue can be...